Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/323830343a363936303a343030303a3a2f33362d3336203d3e20323730323636.roa
File:                     323830343a363936303a343030303a3a2f33362d3336203d3e20323730323636.roa (raw, json)
Hash identifier:          mbE06moiEIE0MFcIC8BRK7XSUcNQlvWboj0pEdAxLwA=
Subject key identifier:   70:52:6E:F6:44:F8:EF:A6:42:0D:11:79:5D:A0:34:56:D6:54:10:6F
Certificate issuer:       /CN=870ECD744DA9DDF67A2979EDD029C3D444043EF8
Certificate serial:       7AE417579B3B6E17DEDF4AC34C233D22CF336D84
Authority key identifier: 87:0E:CD:74:4D:A9:DD:F6:7A:29:79:ED:D0:29:C3:D4:44:04:3E:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/323830343a363936303a343030303a3a2f33362d3336203d3e20323730323636.roa
Signing time:             Thu 04 Apr 2024 23:09:40 +0000
ROA not before:           Thu 04 Apr 2024 23:04:40 +0000
ROA not after:            Thu 03 Apr 2025 23:09:40 +0000
asID:                     270266
IP address blocks:        2804:6960:4000::/36 maxlen: 36

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e4:17:57:9b:3b:6e:17:de:df:4a:c3:4c:23:3d:22:cf:33:6d:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870ECD744DA9DDF67A2979EDD029C3D444043EF8
        Validity
            Not Before: Apr  4 23:04:40 2024 GMT
            Not After : Apr  3 23:09:40 2025 GMT
        Subject: CN=70526EF644F8EFA6420D11795DA03456D654106F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:8f:a4:0b:70:02:6f:46:e2:c7:0c:7b:6f:39:
                    c4:f5:e2:bb:1b:57:d1:78:a5:45:18:e6:80:86:24:
                    11:85:1e:5e:24:2c:ce:c3:84:95:1a:ef:27:7f:1a:
                    eb:f6:eb:65:c6:78:38:25:5a:a3:6f:6b:3a:bc:7c:
                    a3:fd:24:1f:7d:cf:5a:77:9f:80:f5:2b:b5:68:5c:
                    d3:a1:70:28:02:a9:bd:2a:80:ce:1c:50:8f:7b:e0:
                    40:e7:be:70:5a:9a:45:02:19:1a:37:62:87:c7:4b:
                    88:eb:46:55:a4:e6:d5:5d:a3:94:cb:08:04:e6:b3:
                    ab:2c:5e:b6:c2:fb:9b:42:5b:af:31:47:87:8e:77:
                    be:45:e0:53:98:bf:90:ba:57:87:36:33:a6:f8:9c:
                    5a:f3:fc:89:eb:63:fc:df:b5:83:a7:3f:cc:64:2d:
                    85:50:86:a6:15:0b:59:01:b0:ef:89:8e:65:cb:c8:
                    ca:85:fe:ac:84:ae:c8:c2:2d:27:66:71:81:27:b3:
                    c0:15:33:e7:ff:b2:1a:a3:2a:ed:d5:73:58:2c:69:
                    99:43:e8:d5:8d:b4:be:e3:28:89:cd:67:2f:06:0d:
                    4b:06:49:59:e2:ce:81:1b:c9:3c:72:07:bc:05:c1:
                    a2:20:83:62:e9:ae:ee:ee:f8:5d:d0:c3:77:e4:0a:
                    f3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:52:6E:F6:44:F8:EF:A6:42:0D:11:79:5D:A0:34:56:D6:54:10:6F
            X509v3 Authority Key Identifier:
                keyid:87:0E:CD:74:4D:A9:DD:F6:7A:29:79:ED:D0:29:C3:D4:44:04:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/323830343a363936303a343030303a3a2f33362d3336203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6960:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b3:32:2d:56:89:0d:79:29:16:e0:73:a8:95:cc:00:eb:79:ac:
         f3:b4:c8:56:fa:36:8b:97:07:66:96:aa:d3:c9:a8:34:8f:3b:
         ad:41:f6:24:ea:eb:a4:d9:8b:7b:60:d8:f2:61:60:42:a5:85:
         46:ef:8b:c3:62:c1:ba:24:89:47:fb:c4:f9:51:10:48:6f:5f:
         8d:81:1e:78:03:66:e1:ca:89:50:58:33:d0:b4:a7:55:a6:55:
         0c:a7:f6:38:19:d3:da:9b:fd:54:67:50:1c:bb:2f:01:48:20:
         ce:1d:ef:31:95:5a:b5:d4:28:a7:38:ac:38:49:40:f5:41:0c:
         0a:84:c1:da:87:13:e2:b0:82:95:b7:af:90:1d:3b:37:29:9e:
         6b:71:07:c6:f3:92:35:b5:f8:fc:23:6c:99:75:44:ac:99:40:
         94:a6:d9:d1:74:b2:33:64:66:4c:75:a9:fb:01:d1:e1:62:3a:
         9b:8a:43:a9:90:f2:d9:ab:7b:ed:20:09:49:d8:78:73:12:bd:
         ea:97:ca:19:14:3c:5b:49:66:29:8a:c5:8c:49:18:86:df:4b:
         56:51:95:d9:6f:cb:dc:3c:00:3d:c5:71:df:17:c6:96:1a:94:
         7a:25:dd:89:a3:a8:35:70:1a:6d:8b:f6:d4:15:e2:a3:83:47:
         83:75:35:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 07:01:29 2024 by rpki-client on console-fra.rpki-client.org